GCVE - cpe:2.3:a:joomla:bsq_sitestats:1.8.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:joomla:bsq_sitestats:1.8.0:*:*:*:*:*:*:*

part: a version: 1.8.0 update: *

Vendor	Joomla (`6fa59c4b-5b62-59b9-bce0-735b9b6b6c51`)
Product	Bsq Sitestats (`811ad285-1751-5a21-9ef3-2920fa2cbb73`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-7126`	vulnerable	2026-06-08 04:49:30.387775	Details available SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.116Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4090 http://www.securityfocus.com/bid/20614 http://www.securityfocus.com/archive/1/449125/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/29662 http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7125`	vulnerable	2026-06-08 04:49:30.386060	Details available Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.351Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/4090 http://www.securityfocus.com/bid/20614 http://www.securityfocus.com/archive/1/449125/100/0/threaded http://secunia.com/secunia_research/2006-65/advisory/ https://exchange.xforce.ibmcloud.com/vulnerabilities/29661	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7124`	vulnerable	2026-06-08 04:49:30.385729	Details available PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.271Z Open on db.gcve.eu Reference links http://www.osvdb.org/29287 http://www.securityfocus.com/bid/20267 https://exchange.xforce.ibmcloud.com/vulnerabilities/29269 http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats http://securityreason.com/securityalert/2360	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7123`	vulnerable	2026-06-08 04:49:30.385378	Details available Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.080Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/20267 https://exchange.xforce.ibmcloud.com/vulnerabilities/29268 http://securityreason.com/securityalert/2360 http://www.securityfocus.com/archive/1/447356/100/0/threaded http://secunia.com/secunia_research/2006-63/advisory/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-7122`	vulnerable	2026-06-08 04:49:30.384976	Details available Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter. Published: 2007-03-06T01:00:00.000Z Updated: 2024-08-07T20:50:06.115Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/29266 http://www.securityfocus.com/bid/20267 http://securityreason.com/securityalert/2360 http://www.securityfocus.com/archive/1/447356/100/0/threaded http://secunia.com/secunia_research/2006-63/advisory/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.